
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/b287c706-2d12-3e67-bc19-1bb937299cb7.roa
File: b287c706-2d12-3e67-bc19-1bb937299cb7.roa (raw, json)
Hash identifier: 2OJ/FYKknpd7rI+XoYxv1KESZNV1vcZs5rcyveB7Tfo=
Subject key identifier: 88:59:F7:CF:7C:70:94:75:96:7A:ED:F5:64:95:74:86:26:6D:9A:C7
Certificate issuer: /CN=a07401de-4b0a-4532-ac08-dba8b0588c48
Certificate serial: 010D0C9F4328584DAC457CBDDE114EDFEB3A98C0
Authority key identifier: 2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/b287c706-2d12-3e67-bc19-1bb937299cb7.roa
Signing time: Thu 30 Apr 2026 01:00:26 +0000
ROA not before: Thu 30 Apr 2026 01:00:26 +0000
ROA not after: Wed 29 Jul 2026 01:00:26 +0000
asID: 397501
IP address blocks: 128.211.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 08 May 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ac:45:7c:bd:de:11:4e:df:eb:3a:98:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07401de-4b0a-4532-ac08-dba8b0588c48
Validity
Not Before: Apr 30 01:00:26 2026 GMT
Not After : Jul 29 01:00:26 2026 GMT
Subject: CN=f11ce138-2145-42d9-bd7c-6a4a8de3c639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:47:36:fb:c6:4f:21:99:e3:dc:e9:9d:29:60:
05:0d:ba:7a:43:1b:71:84:30:e1:33:53:3a:09:df:
b6:94:06:3a:fa:ab:fc:22:d8:5a:b1:c3:b3:05:5e:
48:84:c5:2f:69:68:e9:f1:9e:bc:6a:60:3f:bb:01:
8e:c7:41:68:f2:ba:85:65:5a:0b:e3:da:6a:b8:4f:
75:30:99:6c:47:5a:52:e3:4a:77:fb:8f:9e:c3:53:
71:5a:96:12:c1:50:30:d8:34:eb:85:6b:ca:60:c9:
29:55:e8:62:56:6b:84:66:fb:90:08:ef:de:fb:be:
98:cf:13:bc:12:1f:79:32:c2:61:2d:8d:f2:81:99:
75:59:5e:05:64:7d:0a:11:3f:31:4b:86:ff:8b:66:
bd:6c:3b:82:9f:a1:53:90:f8:0a:aa:21:43:f0:ea:
16:4e:c6:a1:90:b5:44:de:bb:57:01:e1:2d:35:f0:
8d:3b:f4:48:f2:5c:45:c5:33:79:ac:86:f9:6e:dc:
61:af:de:ad:49:4c:99:fc:59:15:46:62:27:df:e2:
b2:1b:9a:99:07:cc:f7:6a:b0:0c:14:4e:75:71:d3:
2d:27:48:5f:36:2a:89:27:1c:14:2e:04:3e:37:38:
79:6b:c6:31:3b:1f:e6:52:de:30:76:2a:db:99:a2:
97:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:59:F7:CF:7C:70:94:75:96:7A:ED:F5:64:95:74:86:26:6D:9A:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/b287c706-2d12-3e67-bc19-1bb937299cb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl
X509v3 Authority Key Identifier:
keyid:2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer
sbgp-ipAddrBlock: critical
IPv4:
128.211.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:c0:43:e0:cf:e4:ec:1b:31:5e:2f:a4:63:d5:41:d5:7a:c0:
9d:f3:06:af:2a:91:6c:dc:a7:ae:bd:fb:58:71:5f:09:03:bf:
4c:b8:73:b4:2e:fb:df:0a:f7:02:85:f5:10:12:39:9c:7a:3c:
09:0a:b1:6a:a0:24:a0:44:5f:9f:23:98:54:ee:a5:cd:b6:38:
1a:dd:2e:bf:b2:16:35:9c:f3:82:08:cf:ca:74:f3:4b:1c:43:
d6:24:74:7c:64:95:61:01:76:6b:98:dd:bf:49:0e:d1:a7:5b:
c2:55:c8:9d:6e:e2:6b:67:e5:5e:77:26:2b:63:3e:28:2e:52:
65:a5:ae:6a:45:e2:4d:18:79:cc:58:d6:fa:8e:e9:b4:99:d3:
c0:e2:25:1b:cf:96:d1:59:5a:3c:bd:10:a4:86:4c:ca:1a:8b:
27:40:f0:69:bc:85:ee:a0:58:47:73:14:2a:32:5d:24:4c:3c:
ba:45:05:eb:a7:25:59:f9:54:97:fc:a2:d6:f3:48:a4:be:30:
df:1d:e6:2e:cc:d7:74:5e:6d:85:69:64:0e:ce:fc:c9:d7:54:
ae:4c:f6:73:04:9f:ba:16:95:da:69:37:8f:76:c4:8a:e5:dc:
9c:78:3a:65:b8:c7:08:47:58:2a:ff:12:d1:34:2a:2d:17:a6:
fd:29:d5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 02:53:41 2026 by rpki-client